$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer File: 78308f5f-20d8-4869-b8d0-cced78ce51b7.cer (raw, json) Hash identifier: ELuyENJJW+sRObrvamOdQcBMyB3a53fVyXPnq/YyOQY= Subject key identifier: CF:18:EF:06:CD:10:C0:4E:11:AD:49:8D:23:B7:68:A1:2D:FD:87:FB Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CB97A2F165DA05979950AD0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Feb 2026 01:45:22 +0000 Certificate not after: Sun 07 May 2028 00:45:22 +0000 Subordinate resources: IP: 140.235.248.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:7a:2f:16:5d:a0:59:79:95:0a:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 2 01:45:22 2026 GMT Not After : May 7 00:45:22 2028 GMT Subject: CN=78308f5f-20d8-4869-b8d0-cced78ce51b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:92:3b:cc:88:57:9d:11:3e:9b:a6:96:26: 49:25:1d:5a:49:34:44:47:ae:29:78:7e:91:45:f3: 6f:95:51:07:3d:2d:4c:22:77:83:33:56:7c:48:0d: 7f:7b:05:d0:0a:c0:1b:15:4f:00:08:7e:1a:78:7b: 09:de:59:c1:f4:a6:92:3d:6e:48:a0:67:18:d2:4b: c0:34:5c:eb:8f:b1:f9:9a:40:f4:89:1e:1f:78:2e: bf:d7:01:97:59:86:a5:f2:09:25:29:da:19:ec:9a: c4:96:05:34:d3:ce:1e:b4:21:05:04:07:f9:01:42: 07:d4:f8:e2:97:7e:2c:12:f7:f6:ae:c8:77:2b:1e: 11:93:93:31:8d:35:f3:45:23:6b:43:81:eb:f9:7e: 2a:11:68:b4:23:a7:9c:fe:ed:cd:b9:7b:6b:49:fc: aa:ab:4d:63:90:84:97:0b:13:43:f9:a6:35:4d:a8: 25:b9:13:fa:8a:9d:3d:7e:2e:60:9e:aa:fa:d4:4a: 11:9a:20:b8:1a:c9:ee:a3:8a:d6:40:01:56:b5:5f: 25:40:d8:a2:75:b5:ea:59:40:87:54:ce:e0:f3:52: a8:98:e1:49:84:9c:fe:db:30:fe:b9:b2:f0:3c:4d: 16:66:c8:b5:24:bd:35:24:a5:e8:6b:49:c3:8c:95: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:18:EF:06:CD:10:C0:4E:11:AD:49:8D:23:B7:68:A1:2D:FD:87:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 140.235.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:1a:1f:36:92:d3:bd:11:d9:8d:2b:d1:21:15:a9:df:22:54: 22:75:87:56:54:e0:02:2d:7e:76:0f:0b:f9:86:76:16:d0:e8: 0b:8d:bb:39:13:a4:7d:76:07:66:aa:61:c8:87:01:e6:83:b2: 91:cd:3f:d5:03:43:1b:ce:1b:a3:63:d7:6a:9f:66:0f:b2:4f: f9:55:f3:95:30:9b:bb:2d:cb:d9:73:f3:72:3b:22:02:d6:a0: 25:ae:fa:1a:12:ca:ef:c8:fc:fe:88:44:4c:a3:67:e6:c0:44: 4c:70:0b:c8:76:43:28:2e:ba:1d:3b:e4:10:ff:a6:72:d7:0d: 88:53:ad:0a:9a:c0:0f:ed:0b:8c:13:d2:77:9e:40:6a:90:f4: 5d:cf:5f:7c:f8:05:df:60:84:3c:eb:9b:95:8f:1b:24:64:c5: f2:b9:d0:1c:e1:dd:29:1b:83:10:40:9a:49:0e:cb:fb:8d:0c: e6:00:53:1e:4f:c2:bc:b3:66:41:14:12:d4:b6:d7:f0:a3:a4: d3:15:9d:cc:a3:1d:93:f3:9b:de:70:ec:af:9e:e4:39:54:02: 72:a3:e9:6e:29:fc:3b:62:fa:30:d7:11:db:a3:87:ac:b8:d3: 50:4a:f5:56:aa:d1:8c:57:15:4d:8b:c7:0f:fb:0f:26:55:cf: fb:fe:2c:d4 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEy5ei8WXaBZeZUK0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIwMjAxNDUyMloXDTI4MDUwNzAwNDUyMlowLzEtMCsGA1UEAxMk NzgzMDhmNWYtMjBkOC00ODY5LWI4ZDAtY2NlZDc4Y2U1MWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuiSO8yIV50RPpumliZJJR1aSTRER64peH6R RfNvlVEHPS1MIneDM1Z8SA1/ewXQCsAbFU8ACH4aeHsJ3lnB9KaSPW5IoGcY0kvA NFzrj7H5mkD0iR4feC6/1wGXWYal8gklKdoZ7JrElgU0084etCEFBAf5AUIH1Pji l34sEvf2rsh3Kx4Rk5MxjTXzRSNrQ4Hr+X4qEWi0I6ec/u3NuXtrSfyqq01jkISX CxND+aY1TagluRP6ip09fi5gnqr61EoRmiC4Gsnuo4rWQAFWtV8lQNiidbXqWUCH VM7g81KomOFJhJz+2zD+ubLwPE0WZsi1JL01JKXoa0nDjJVsswIDAQABo4ID/zCC A/swHQYDVR0OBBYEFM8Y7wbNEMBOEa1JjSO3aKEt/Yf7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83 ODMwOGY1Zi0yMGQ4LTQ4NjktYjhkMC1jY2VkNzhjZTUxYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1Lzc4MzA4ZjVmLTIwZDgtNDg2OS1i OGQwLWNjZWQ3OGNlNTFiNy83ODMwOGY1Zi0yMGQ4LTQ4NjktYjhkMC1jY2VkNzhj ZTUxYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACM6/gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdhofNpLTvRHZjSvRIRWp 3yJUInWHVlTgAi1+dg8L+YZ2FtDoC427OROkfXYHZqphyIcB5oOykc0/1QNDG84b o2PXap9mD7JP+VXzlTCbuy3L2XPzcjsiAtagJa76GhLK78j8/ohETKNn5sBETHAL yHZDKC66HTvkEP+mctcNiFOtCprAD+0LjBPSd55AapD0Xc9ffPgF32CEPOublY8b JGTF8rnQHOHdKRuDEECaSQ7L+40M5gBTHk/CvLNmQRQS1LbX8KOk0xWdzKMdk/Ob 3nDsr57kOVQCcqPpbin8O2L6MNcR26OHrLjTUEr1VqrRjFcVTYvHD/sPJlXP+/4s 1A== -----END CERTIFICATE-----Generated at Sun Feb 22 16:37:57 2026 by rpki-client